SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 0 - 185,800 / annual
Wave Mobile Money is building financial services for Africa, with a mission to make the continent cashless. The company operates across 9 countries with millions of users and is backed by top-tier investors including Sequoia, Stripe, and Y Combinator.
You'll join a small 4-person security team as a Senior Application Security Engineer, reporting to the Security Team Lead and working closely with the CISO. This is a broadly scoped role that spans multiple security domains: application security, infrastructure security, AI/ML safety, and governance.
Key responsibilities include:
- Designing and implementing application security controls, including centralized login, permissions enforcement, and privileged access management
- Securing AI-powered agents and agentic workflows against prompt injection, tool misuse, credential exposure, and data exfiltration
- Developing internal AI governance standards for LLM-powered tools in a regulated financial services environment
- Designing agentic SIEM/SecOps pipelines with AI-driven triage, alerting, and response automation
- Securing Model Context Protocol (MCP) integrations and tuning code security review agents
- Reworking secrets management with ephemeral secrets and tighter access scopes
- Conducting security reviews of public-facing APIs and supporting the broader engineering organization through design reviews and security advice
- Remediating non-conformities and maintaining compliance with standards like ISO-27001 and PCI-DSS
You'll own projects end-to-end, from planning through production monitoring. The role involves working across product and platform teams on diverse security initiatives. You'll also help define guardrails for AI usage as the company integrates AI agents into engineering and operations workflows.
Wave offers competitive compensation, generous equity, flexible vacation (30-40 days typical), 6 months paid parental leave, subsidized health insurance, $10,000 annual charitable matching, and yearly travel to one of Wave's African operating countries. The company runs performance reviews twice yearly with bonuses and promotions for strong performers after 6+ months.
REQUIREMENTS:
- Minimum 7-8 years of professional experience, with at least 3-5 years in a security-related role
- Strong experience with Python
- Fluent English
- Beneficial: experience with ISO-27001 and PCI-DSS compliance frameworks
- Preferred: experience securing agentic AI systems, LLM-based security tooling, source code review, penetration testing, and building governance frameworks for AI in regulated environments
